General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=adempsey%40btutilities.com&senderemailaddress=rmcbride%40chambless-math.com&senderorganization=AwGEAAAAAoAAAAADAQAAANPu52tb0WpLrMi8HJFYSWFPVT1jaGFtYmxlc3NtYXRoLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxNEEwMDcsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTRAVEmk%2fx2JNil9Bqbi8411DTj1Db25maWd1cmF0aW9uLENOPWNoYW1ibGVzc21hdGgub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE0QTAwNyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cCH0PR13MB4570C641D5B304F6BDBD5772D7419%40CH0PR13MB4570.namprd13.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40chamblessmath.onmicrosoft.com&consumerEncryption=false&senderorgid=5526729b-5da8-4878-b9f5-96944d3c71c6&urldecoded=1&e4e_sdata=q0L2uFqi0f4QIyklWXz%2f7QVzGU5NzUYKlYSyXYbtAQ9MBruxEsnjvdanjwQSS5Ql9bpTQ6S1H%2bhcMZE8p0weLVktMHJFtYoBc4%2bDb1uQa97c%2f%2fU1q%2fZfl6by9%2bMUH6zyneTap%2f0iw%2bpbyCpSaLx7cXoS8P%2ffeVSNNiwqgIxqUO6MHo0luSG30r3jA8y8vzRQN3xU7dnky2vaJYY61jYrk0Tpg44cMic6xBXF5C%2bfI3uElRLS%2b3LLvQd5b0XhWFzRrDRO0UXLi%2fwsQL5G7G5lsvWt1IdcVX1PH7RWXjQHEH1RG1hgsH6MFYIKl4%2fD%2fz1aWxGZl2z5m3SlZsahzaht4w%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]